Test Kennung:	1.3.6.1.4.1.25623.1.0.104653
Kategorie:	Web Servers
Titel:	Apache Tomcat Information Disclosure Vulnerability (Mar 2023) - Linux
Zusammenfassung:	Apache Tomcat is prone to an information disclosure; vulnerability.
Beschreibung:	Summary: Apache Tomcat is prone to an information disclosure vulnerability. Vulnerability Insight: When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Tomcat did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Affected Software/OS: Apache Tomcat versions through 8.5.85, 9.0.0-M1 through 9.0.71, 10.x through 10.1.5 and 11.0.0-M1 through 11.0.0-M2. Solution: Update to version 8.5.86, 9.0.72, 10.1.6, 11.0.0-M3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-28708 https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.